Privacy, plainly.
Last updated 14 September 2026
Location searches
Your browser asks permission before sharing your current location. Coordinates are used to find nearby properties and appear in your search URL, so avoid sharing that URL if you prefer to keep the location private. The location field may show a nearby locality from our indexed property data as an approximate label; the device coordinates remain the search centre. This label lookup stays within PropertyLocator. Select Search to run the search. You can always enter a place or postcode instead.
Town and postcode searches are sent to Postcodes.io. Map tiles are requested from the configured map provider (OpenStreetMap by default), which receives your IP address and the map areas requested. Their own privacy policies apply. Map requests do not include your account details.
Your account and saved places
We store your email address, a securely hashed password, and the homes and searches you choose to save. Saved searches include their selected coordinates. Account security information supports sign-in, email confirmation, password recovery and optional two-factor authentication. You can download your account data or delete your account from account settings. Deleting your account also removes its saved homes and searches.
Private notes and listing alerts
Your saved-home notes are private to your account. Daily saved-search emails are optional and require a confirmed email address. We store your preferences, observed matching prices for up to a year, and delivery history for up to 90 days to avoid repeated notifications. Turn alerts off from Saved places or the unsubscribe link in an email. Deleting the search removes its alert records; deleting the account also removes its notes and alert records. Your personal-data download includes these records.
Returning to your search
This tab temporarily remembers your latest search URL, filters, scroll position and map view so you can return from a home or comparison. The search URL may contain the coordinates you selected. This browser session data is not linked to your account or used for advertising; it is ignored after six hours and cleared when the tab session ends. Place suggestions send the text you type (from three characters) to our place-search service and Postcodes.io, just like a submitted place search.
Property comparisons
When you select homes to compare, their property IDs are stored in this browser. They are not linked to your account or used for advertising. Select Clear on the comparison bar to remove the selection.
Live listing checks
A location search can queue a background check of nearby listings. Coordinates and bounded sample points around the selected area are sent to Postcodes.io to find surrounding postcode districts. They are held temporarily in memory for the check; district lookups may be cached for six hours. Property websites receive requests from our server for those areas, without your account details. The temporary queue is cleared on restart and completed entries expire after six hours.
Listing photographs
Listing thumbnails and gallery photographs load directly from the property website or its image service. Opening a property or its Photos viewer asks our server to retrieve that listing’s available photo URLs; this does not send your account details to the source. That service receives your IP address and the requested image address. We suppress the page referrer for these images, so your search URL and its coordinates are not sent with the image request. We do not send your account details to these services.
Cookies
The site uses essential cookies for authentication, form security and temporary notifications. We do not add advertising cookies or third-party analytics scripts.
Service analytics
Aggregate service analytics are enabled. We count searches, property views and visits to sellers. Events contain no visitor identifier, account identifier, IP address or precise search coordinates. Area trends use the town of a result, rather than your typed search. Events are retained for up to 90 days. These are activity counts, not unique visitor counts.
Reports and administration
Listing reports and administrator audit records are stored to maintain the service. Please leave personal information out of report details. Hosting access logs may record requests for security and operations; these must be configured and retained separately by the site operator.
Getting in touch
For privacy requests, contact anthony@webpilot.uk.